{"id":84702,"date":"2020-06-10T01:43:04","date_gmt":"2020-06-09T23:43:04","guid":{"rendered":"https:\/\/prohoster.info\/blog\/administrirovanie\/remote-desktop-glazami-atakuyushhego"},"modified":"2020-06-10T01:43:04","modified_gmt":"2020-06-09T23:43:04","slug":"remote-desktop-glazami-atakuyushhego","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/remote-desktop-glazami-atakuyushhego","title":{"rendered":"Kaugjuhtimispuldi vaade r\u00fcndaja silmade l\u00e4bi","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"<h1 id=\"1-vvedenie\">1. Sissejuhatus<\/h1>\n<p><\/p>\n<p>Ettev\u00f5tted, kellel ei olnud korraldatud kaugjuurdep\u00e4\u00e4su s\u00fcsteeme, seadistasid neid \u00e4\u00e4rmuslikul kiirusel umbes paar kuud tagasi. Mitte k\u00f5ik administraatorid ei olnud selliseks ''kuumuseks'' valmis, mille tulemusena tekkisid turvaaukudega seotud probleemid: vale konfiguratsioon teenustes v\u00f5i isegi aegunud tarkvaraversioonide installimine, kus oli varem avastatud haavatavusi. M\u00f5ned on juba tasunud selle eest, teistel on rohkem \u00f5nne, kuid j\u00e4reldused peaksid kindlasti olema tehtud k\u00f5igile. Uue taseme lojaalsus kaug- ja kodut\u00f6\u00f6le on dramaatiliselt kasvanud ning \u00fcha enam ettev\u00f5tteid k\u00e4sitleb kaug- ja kodut\u00f6\u00f6d sobiva formaadina p\u00fcsivalt.<\/p>\n<p><noindex><a rel=\"nofollow\" name=\"habracut\"><\/a><\/noindex><\/p>\n<p>Nii et kaugjuurdep\u00e4\u00e4su tagamiseks on palju v\u00f5imalusi: erinevad VPN-id, RDS ja VNC, TeamViewer ja teised. Administraatoritel on valikut, mis p\u00f5hineb ettev\u00f5tte v\u00f5rguehituse ja seadmete erip\u00e4radel. K\u00f5ige populaarsemad lahendused on siiski VPN-id, kuid paljud v\u00e4ikesed ettev\u00f5tted valivad RDS-i (Remote Desktop Services), kuna need on lihtsamad ja kiiremalt seadistatavad.<\/p>\n<p><\/p>\n<p>Selles artiklis r\u00e4\u00e4gime l\u00e4hemalt RDS-i turvalisusest. Teeme l\u00fchikese \u00fclevaate teadaolevatest haavatavustest ning arutame mitmeid r\u00fcnnaku stsenaariume, mis p\u00f5hinevad Active Directory-l. Loodame, et meie artikkel aitab kellelgi oma vigu parandada ja turvalisust t\u00f5sta.<\/p>\n<p><\/p>\n<h1 id=\"2-nedavnie-uyazvimosti-rdsrdp\">2. Hiljutised RDS\/RDP haavatavused<\/h1>\n<p><\/p>\n<p>Iga tarkvaras on vigu ja haavatavusi, mida kurjategijad \u00e4ra kasutavad, ning RDS ei ole erand. Viimasel ajal on Microsoft sageli teatanud uutest haavatavustest, mist\u00f5ttu oleme otsustanud nende l\u00fchikese \u00fclevaate koostada:<\/p>\n<p><\/p>\n<ul>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/portal.msrc.microsoft.com\/en-us\/security-guidance\/advisory\/CVE-2019-0787\">CVE-2019-0787<\/a><\/noindex><\/li>\n<\/ul>\n<p><\/p>\n<p>See haavatavus ohustab kasutajaid, kes \u00fchendavad end kompromiteeritud serveriga. Kurjategija v\u00f5ib saada kontrolli kasutaja seadme \u00fcle v\u00f5i j\u00e4\u00e4da s\u00fcsteemi, et tagada pidev kaugjuurdep\u00e4\u00e4s.<\/p>\n<p><\/p>\n<ul>\n<li><noindex><a rel=\"nofollow\" href=\"https:\/\/portal.msrc.microsoft.com\/en-US\/security-guidance\/advisory\/CVE-2019-1181\">CVE-2019-1181<\/a><\/noindex> \/ <noindex><a rel=\"nofollow\" href=\"https:\/\/portal.msrc.microsoft.com\/en-US\/security-guidance\/advisory\/CVE-2019-1182\">CVE-2019-1182<\/a><\/noindex> \/ <noindex><a rel=\"nofollow\" href=\"https:\/\/portal.msrc.microsoft.com\/en-US\/security-guidance\/advisory\/CVE-2020-0609\">CVE-2020-0609<\/a><\/noindex><\/li>\n<\/ul>\n<p><\/p>\n<p>See haavat v\u00f5imaldavad volitamata r\u00fcndajal kaugjuhtimise teel t\u00e4ita serveris, millel on RDS, suvalist koodi spetsiaalselt koostatud p\u00e4ringu kaudu. Samuti saab neid kasutada ussidena, mis levitavad kahjulikku tarkvara, nakatades ise naaberv\u00f5rgu seadmeid. Seet\u00f5ttu v\u00f5ivad need haavatavused ohustada kogu ettev\u00f5tte v\u00f5rku, kusjuures ainus kaitse on \u00f5igeaegne uuendamine.<\/p>\n<p><\/p>\n<p>Kaugjuhtimise tarkvara on saanud suurenenud t\u00e4helepanu nii teadlastelt kui ka r\u00fcndajatelt, mist\u00f5ttu v\u00f5ime varsti kuulda uutest sarnastest haavatavustest.<\/p>\n<p><\/p>\n<p>Hea uudis on see, et mitte k\u00f5ikide haavatavuste jaoks ei ole avalikke eksploite. Halbadest uudistest tulenevalt ei ole r\u00fcndajale, kellel on teadmised, keeruline kirjutada haavatavuse eksploiti tema kirjelduse p\u00f5hjal v\u00f5i kasutada selliseid tehnikaid nagu Patch Diffing (millest meie kolleegid on kirjutanud <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/dsec\/blog\/479972\/\">artiklis<\/a><\/noindex>). Seet\u00f5ttu soovitame regulaarselt tarkvara uuendada ja j\u00e4lgida uute avastatud haavatavuste teadet.<\/p>\n<p><\/p>\n<h1 id=\"3-ataki\">3. R\u00fcnnakud<\/h1>\n<p><\/p>\n<p>L\u00e4heme artikli teise ossa, kus n\u00e4itame, kuidas r\u00fcnnakud Active Directory p\u00f5hjal \u00fcles ehitatud v\u00f5rguinfrastruktuuri vastu algavad. <\/p>\n<p><\/p>\n<p>Kasutatud meetodid on rakendatavad j\u00e4rgmise r\u00fcndaja mudeli jaoks: kurjategija, kellel on kasutajakonto ja juurdep\u00e4\u00e4s Remote Desktop Gateway'le \u2014 terminaliserverile (see on sageli kergesti ligip\u00e4\u00e4setav n\u00e4iteks v\u00e4lisest v\u00f5rgust). Rakendades neid meetodeid, suudab kurjategija j\u00e4tkata r\u00fcnnakut infrastruktuurile ning kinnistada oma kohalolekut v\u00f5rgus.<\/p>\n<p><\/p>\n<p>V\u00f5rgu konfiguratsioon v\u00f5ib igal konkreetsel juhul erineda, kuid kirjeldatud meetodid on \u00fcsna universaalsed.<\/p>\n<p><\/p>\n<h2 id=\"primery-vyhoda-iz-ogranichennogo-okruzheniya-i-povysheniya-privilegiy\">N\u00e4ited piiratud keskkonnast v\u00e4ljap\u00e4\u00e4semiseks ja privileegide t\u00f5stmiseks<\/h2>\n<p><\/p>\n<p>Kui kurjategijal on juurdep\u00e4\u00e4s Remote Desktop Gateway'le, peab ta t\u00f5en\u00e4oliselt silmitsi seisma mingi piiratud keskkonnaga. Terminaliserverisse sisse logimisel k\u00e4ivitatakse seal rakendus: Remote Desktop protokolli \u00fchendamise aken sisemistele ressurssidele, failihaldur, office paketid v\u00f5i m\u00f5ni muu tarkvara. <\/p>\n<p><\/p>\n<p>R\u00fcnde on r\u00fcndajana saada ligip\u00e4\u00e4s k\u00e4su t\u00e4itmisele, st cmd v\u00f5i powershelli k\u00e4ivitamisele. Sellega v\u00f5ivad aidata mitmed klassikalised tehnikaid Windowsi \"liivakastist\" p\u00f5genemiseks. Vaatleme neid l\u00e4hemalt.<\/p>\n<p><\/p>\n<p><strong>Valik 1<\/strong>. Kurjategijal on juurdep\u00e4\u00e4s Remote Desktopi aknale Remote Desktop Gateway raames:<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Kaugjuhtimispuldi vaade r\u00fcndaja silmade l\u00e4bi\" src=\"\/wp-content\/uploads\/2020\/06\/10a6e31c6b674a3654d267d503a980cb.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>Avatakse men\u00fc\u00fc \"Show Options\". Ilmuvad valikud \u00fchenduse konfiguratsioonifailide manipuleerimiseks:<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Kaugjuhtimispuldi vaade r\u00fcndaja silmade l\u00e4bi\" src=\"\/wp-content\/uploads\/2020\/06\/5751713ae2c4708844dbfe6275b6dd60.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>Selle akna kaudu on v\u00f5imalik probleemideta p\u00e4\u00e4seda Failihaldurisse, vajutades m\u00f5nele \"Open\" v\u00f5i \"Save\" nupule:<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Kaugjuhtimispuldi vaade r\u00fcndaja silmade l\u00e4bi\" src=\"\/wp-content\/uploads\/2020\/06\/22ffb81cb03cef358b308a4198d5df91.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>Avatakse Failihaldur. Selle \"aadressirida\" v\u00f5imaldab k\u00e4ivitada lubatud t\u00e4idetavaid faile ning n\u00e4idata failis\u00fcsteemi. See v\u00f5ib r\u00fcndaja jaoks olla kasulik, kui s\u00fcsteemi kettad on peidetud ja neile otsene juurdep\u00e4\u00e4s on v\u00f5imatu:<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Kaugjuhtimispuldi vaade r\u00fcndaja silmade l\u00e4bi\" src=\"\/wp-content\/uploads\/2020\/06\/57a0ede0267cac05f43ee7d75293b733.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p>\u2192 <strong><noindex><a rel=\"nofollow\" href=\"https:\/\/youtu.be\/L6kTjr-5w9M\">Demonstroosion video<\/a><\/noindex><\/strong><\/p>\n<p><\/p>\n<p>Sarnast stsenaariumi saab korrata, n\u00e4iteks Microsoft Office'i paketi Exceli kaugkasutuse puhul. <\/p>\n<p><\/p>\n<p>\u2192 <strong><noindex><a rel=\"nofollow\" href=\"https:\/\/youtu.be\/m8pkTJpP6wY\">Demonstroosion video<\/a><\/noindex><\/strong><\/p>\n<p><\/p>\n<p>Lisaks ei tohi unustada makrosid, mida kasutatakse selles kontoripaketis. Meie kolleegid on k\u00e4sitlenud makrode turvaprobleeme. <noindex><a rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/dsec\/blog\/353800\/\">artiklis<\/a><\/noindex>.<\/p>\n<p><\/p>\n<p><strong>Variant 2<\/strong>. Kasutades samu sisendeid nagu eelnevas variandis, k\u00e4ivitab r\u00fcndaja mitu \u00fchendust kauglaudadega sama konto alla. Taask\u00e4ivitamisel katkestatakse esimene ja ekraanile ilmub veateade. Selle akna abinupp kutsub esile Internet Exploreri serveris, mille j\u00e4rel saab r\u00fcndaja minna Failihaldurisse.<\/p>\n<p><\/p>\n<p>\u2192 <strong><noindex><a rel=\"nofollow\" href=\"https:\/\/youtu.be\/yBKt6TZggxc\">Demonstroosion video<\/a><\/noindex><\/strong><\/p>\n<p><\/p>\n<p><strong>Variant 3<\/strong>. Kui t\u00e4psustatud piirangud k\u00e4ivitatavate failide k\u00e4ivitamiseks, v\u00f5ib r\u00fcndaja sattuda olukorda, kus r\u00fchmapoliitikad keelavad cmd.exe t\u00e4idesaatva k\u00e4itamise administraatori poolt.<\/p>\n<p><\/p>\n<p>On v\u00f5imalus sellest k\u00f5rvale hiilida, k\u00e4ivitades bat-faili kauglaudadega, mille sisu on kujul cmd.exe \/K . Cmd-i k\u00e4ivitamise viga ja bat-faili eduka t\u00e4itmise n\u00e4ide on toodud alloleval joonisel.<\/p>\n<p><\/p>\n<p><img decoding=\"async\" alt=\"Kaugjuhtimispuldi vaade r\u00fcndaja silmade l\u00e4bi\" src=\"\/wp-content\/uploads\/2020\/06\/3cc118158345110d82461c9133a048c6.png\" style=\"display:block;margin: 0 auto;\" \/><\/p>\n<p><\/p>\n<p><strong>Variant 4<\/strong>. Rakenduste k\u00e4ivitamise keelamine failide nimede mustade nimekirjade abil ei ole kuldje, neid saab k\u00f5rvale hiilida. <\/p>\n<p><\/p>\n<p>Vaatame j\u00e4rgmise stsenaariumi: oleme piiratud juurdep\u00e4\u00e4s k\u00e4sureale, keelanud Internet Explorer ja PowerShelli k\u00e4ivitamise r\u00fchmapoliitikate kaudu. R\u00fcndaja proovib avada abi - mingit vastust ei tule. Proovib k\u00e4ivitada PowerShelli konteksti men\u00fc\u00fcst, mis kutsub v\u00e4lja Shift-klahvi vajutamisega - teade administraatori k\u00e4ivitamisest keeldumisest. Proovib k\u00e4ivitada PowerShelli aadressiribal - j\u00e4lle ei tule mingit vastust. Kuidas sellest piirangust m\u00f6\u00f6da hiilida? <\/p>\n<p><\/p>\n<p>Piisab, kui kopeerida powershell.exe fail C:WindowsSystem32WindowsPowerShellv1.0 kaustast kasutaja kausta, muuta nimeks, mis erineb powershell.exe-st, ja seej\u00e4rel on k\u00e4ivitamise v\u00f5imalus olemas.<\/p>\n<p><\/p>\n<p>Vaikimisi, kui \u00fchendate kaug t\u00f6\u00f6lauaga, antakse juurdep\u00e4\u00e4s kliendi kohalikule kettale, kust r\u00fcndaja saab kopeerida powershell.exe ja p\u00e4rast \u00fcmbernimetamist k\u00e4ivitada.<\/p>\n<p><\/p>\n<p>\u2192 <strong><noindex><a rel=\"nofollow\" href=\"https:\/\/youtu.be\/nLdxEbr4Gk8\">Demonstroosion video<\/a><\/noindex><\/strong><\/p>\n<p><\/p>\n<p>Oleme v\u00e4lja toonud vaid m\u00f5ned viisid piirangute \u00fcletamiseks, stsenaariume saab veel palju v\u00e4lja m\u00f5elda, kuid k\u00f5ik need \u00fchendab p\u00e4\u00e4s Windowsi Failihaldurile. Rakendusi, mis kasutavad Windowsi standardseid failide t\u00f6\u00f6tlemise vahendeid, on palju ning piiratud keskkonda asetades saab rakendada sarnaseid tehnikaid.<\/p>\n<p><\/p>\n<h1 id=\"4-rekomendacii-i-zaklyuchenie\">4. Soovitused ja kokkuv\u00f5tted<\/h1>\n<p><\/p>\n<p>Nagu me n\u00e4eme, on isegi piiratud keskkonnas r\u00fcnnaku arenguks ruumi. Siiski on v\u00f5imalik r\u00fcndaja elu keeruliseks muuta. Anname v\u00e4lja \u00fcldised soovitused, mis v\u00f5ivad olla kasulikud nii meie k\u00e4sitletud variantides kui ka muudes olukordades.<\/p>\n<p><\/p>\n<ul>\n<li>Piirake programmide k\u00e4ivitamist mustade\/valgete nimekirjadega, kasutades grupipoliitikaid.<br \/>\nSamuti j\u00e4\u00e4b enamikul juhtudel v\u00f5imalus koodi k\u00e4ivitamiseks. Soovitame tutvuda projektiga <noindex><a rel=\"nofollow\" href=\"https:\/\/lolbas-project.github.io\/\">LOLBAS<\/a><\/noindex>, et saada teadlikuks dokumenteerimata meetoditest failide manipuleerimiseks ja koodi t\u00e4itmiseks s\u00fcsteemis.<br \/>\nSoovitame kombineerida m\u00f5lemat t\u00fc\u00fcpi piiranguid: n\u00e4iteks saab lubada Microsofti poolt allkirjastatud t\u00e4itmisfailide k\u00e4ivitamist, kuid piirata cmd.exe k\u00e4ivitamist.<\/li>\n<li>Keelake Internet Explorer'iga seotud seadetetab (seda saab teha kohalikult registris). <\/li>\n<li>Keelake regedit kaudu Windowsi sisseehitatud abi kutse.<\/li>\n<li>Keelake kohalike kettate montimine kaug\u00fchenduste jaoks, kui see piirang ei ole kasutajate jaoks kriitiline.<\/li>\n<li>Piirake kohalike kettate ligip\u00e4\u00e4su kaugmasinasse, j\u00e4ttes ligip\u00e4\u00e4su vaid kasutajakataloogidele.<\/li>\n<\/ul>\n<p><\/p>\n<p>Loodame, et see oli teile v\u00e4hemalt huvitav ja loodame, et see artikkel aitab muuta teie ettev\u00f5tte kaugteenuseid turvalisemaks.<\/p>\n<p>Allikas: <a content=\"nofollow\" rel=\"nofollow\" href=\"https:\/\/habr.com\/ru\/company\/dsec\/blog\/505600\/\">habr.com<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"<p>1. \u0412\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u0443 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043d\u0435 \u0431\u044b\u043b\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u043d\u044b \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u0432 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u043c \u043f\u043e\u0440\u044f\u0434\u043a\u0435 \u0440\u0430\u0437\u0432\u043e\u0440\u0430\u0447\u0438\u0432\u0430\u043b\u0438 \u0438\u0445 \u043f\u0430\u0440\u0443 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u043d\u0430\u0437\u0430\u0434. \u041d\u0435 \u0432\u0441\u0435 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u044b \u0431\u044b\u043b\u0438 \u0433\u043e\u0442\u043e\u0432\u044b \u043a \u0442\u0430\u043a\u043e\u0439 \u201c\u0436\u0430\u0440\u0435\u201d, \u043a\u0430\u043a \u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0435 \u2014 \u0443\u043f\u0443\u0449\u0435\u043d\u0438\u044f \u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438: \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u0430\u044f \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432 \u0438\u043b\u0438 \u0434\u0430\u0436\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u041f\u041e \u0441 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u043c\u0438 \u0440\u0430\u043d\u0435\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438. \u041e\u0434\u043d\u0438\u043c \u044d\u0442\u0438 \u0443\u043f\u0443\u0449\u0435\u043d\u0438\u044f \u0443\u0436\u0435 \u0432\u0435\u0440\u043d\u0443\u043b\u0438\u0441\u044c \u0431\u0443\u043c\u0435\u0440\u0430\u043d\u0433\u043e\u043c, \u0434\u0440\u0443\u0433\u0438\u043c \u043f\u043e\u0432\u0435\u0437\u043b\u043e \u0431\u043e\u043b\u044c\u0448\u0435, [&hellip;]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":84703,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-84702","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 4.9.10 - aioseo.com -->\n\t<meta name=\"description\" content=\"1. \u0412\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u0443 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043d\u0435 \u0431\u044b\u043b\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u043d\u044b \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u0432 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u043c \u043f\u043e\u0440\u044f\u0434\u043a\u0435 \u0440\u0430\u0437\u0432\u043e\u0440\u0430\u0447\u0438\u0432\u0430\u043b\u0438 \u0438\u0445 \u043f\u0430\u0440\u0443 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u043d\u0430\u0437\u0430\u0434. \u041d\u0435 \u0432\u0441\u0435 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u044b \u0431\u044b\u043b\u0438 \u0433\u043e\u0442\u043e\u0432\u044b \u043a \u0442\u0430\u043a\u043e\u0439 \u201c\u0436\u0430\u0440\u0435\u201d, \u043a\u0430\u043a \u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0435 \u2014 \u0443\u043f\u0443\u0449\u0435\u043d\u0438\u044f \u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438: \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u0430\u044f \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432 \u0438\u043b\u0438 \u0434\u0430\u0436\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u041f\u041e \u0441 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u043c\u0438 \u0440\u0430\u043d\u0435\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438. \u041e\u0434\u043d\u0438\u043c \u044d\u0442\u0438 \u0443\u043f\u0443\u0449\u0435\u043d\u0438\u044f \u0443\u0436\u0435 \u0432\u0435\u0440\u043d\u0443\u043b\u0438\u0441\u044c \u0431\u0443\u043c\u0435\u0440\u0430\u043d\u0433\u043e\u043c, \u0434\u0440\u0443\u0433\u0438\u043c \u043f\u043e\u0432\u0435\u0437\u043b\u043e \u0431\u043e\u043b\u044c\u0448\u0435,\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"Yuri Gagarin\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/remote-desktop-glazami-atakuyushhego\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 4.9.10\" \/>\n\t\t<meta property=\"og:locale\" content=\"et_EE\" \/>\n\t\t<meta property=\"og:site_name\" content=\"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"\ud83e\udd47Remote Desktop \u0433\u043b\u0430\u0437\u0430\u043c\u0438 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u0433\u043e | ProHoster\" \/>\n\t\t<meta property=\"og:description\" content=\"1. \u0412\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u0443 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043d\u0435 \u0431\u044b\u043b\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u043d\u044b \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u0432 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u043c \u043f\u043e\u0440\u044f\u0434\u043a\u0435 \u0440\u0430\u0437\u0432\u043e\u0440\u0430\u0447\u0438\u0432\u0430\u043b\u0438 \u0438\u0445 \u043f\u0430\u0440\u0443 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u043d\u0430\u0437\u0430\u0434. \u041d\u0435 \u0432\u0441\u0435 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u044b \u0431\u044b\u043b\u0438 \u0433\u043e\u0442\u043e\u0432\u044b \u043a \u0442\u0430\u043a\u043e\u0439 \u201c\u0436\u0430\u0440\u0435\u201d, \u043a\u0430\u043a \u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0435 \u2014 \u0443\u043f\u0443\u0449\u0435\u043d\u0438\u044f \u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438: \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u0430\u044f \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432 \u0438\u043b\u0438 \u0434\u0430\u0436\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u041f\u041e \u0441 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u043c\u0438 \u0440\u0430\u043d\u0435\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438. \u041e\u0434\u043d\u0438\u043c \u044d\u0442\u0438 \u0443\u043f\u0443\u0449\u0435\u043d\u0438\u044f \u0443\u0436\u0435 \u0432\u0435\u0440\u043d\u0443\u043b\u0438\u0441\u044c \u0431\u0443\u043c\u0435\u0440\u0430\u043d\u0433\u043e\u043c, \u0434\u0440\u0443\u0433\u0438\u043c \u043f\u043e\u0432\u0435\u0437\u043b\u043e \u0431\u043e\u043b\u044c\u0448\u0435,\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/remote-desktop-glazami-atakuyushhego\" \/>\n\t\t<meta property=\"og:image\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:secure_url\" content=\"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg\" \/>\n\t\t<meta property=\"og:image:width\" content=\"350\" \/>\n\t\t<meta property=\"og:image:height\" content=\"350\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2020-06-09T23:43:04+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2020-06-09T23:43:04+00:00\" \/>\n\t\t<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<meta property=\"article:author\" content=\"https:\/\/www.facebook.com\/prohoster\" \/>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"\ud83e\udd47Kaugjuhtimislaud r\u00fcndaja silmade l\u00e4bi | ProHoster","description":"1. Sissejuhatus Ettev\u00f5tted, kellel ei olnud korraldatud kaugjuurdep\u00e4\u00e4su s\u00fcsteeme, k\u00e4ivitasid need erakorralise korras paar kuud tagasi. Mitte k\u00f5ik administraatorid ei olnud selliseks \u201ekuumuseks\u201c valmistunud, mist\u00f5ttu tekkisid turvaaukude t\u00f5ttu puuduj\u00e4\u00e4gid: teenuste vale konfigureerimine v\u00f5i isegi vananenud tarkvaraversioonide installimine, millel olid varem avastatud haavatavused. M\u00f5ned neist puuduj\u00e4\u00e4kidest on juba tagasinud, teistele on rohkem vedanud.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/remote-desktop-glazami-atakuyushhego","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47Remote Desktop \u0433\u043b\u0430\u0437\u0430\u043c\u0438 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u0433\u043e | ProHoster","og:description":"1. \u0412\u0432\u0435\u0434\u0435\u043d\u0438\u0435 \u041a\u043e\u043c\u043f\u0430\u043d\u0438\u0438, \u0443 \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043d\u0435 \u0431\u044b\u043b\u0438 \u043e\u0440\u0433\u0430\u043d\u0438\u0437\u043e\u0432\u0430\u043d\u044b \u0441\u0438\u0441\u0442\u0435\u043c\u044b \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u0430, \u0432 \u044d\u043a\u0441\u0442\u0440\u0435\u043d\u043d\u043e\u043c \u043f\u043e\u0440\u044f\u0434\u043a\u0435 \u0440\u0430\u0437\u0432\u043e\u0440\u0430\u0447\u0438\u0432\u0430\u043b\u0438 \u0438\u0445 \u043f\u0430\u0440\u0443 \u043c\u0435\u0441\u044f\u0446\u0435\u0432 \u043d\u0430\u0437\u0430\u0434. \u041d\u0435 \u0432\u0441\u0435 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u044b \u0431\u044b\u043b\u0438 \u0433\u043e\u0442\u043e\u0432\u044b \u043a \u0442\u0430\u043a\u043e\u0439 \u201c\u0436\u0430\u0440\u0435\u201d, \u043a\u0430\u043a \u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0435 \u2014 \u0443\u043f\u0443\u0449\u0435\u043d\u0438\u044f \u0432 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438: \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u0430\u044f \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f \u0441\u0435\u0440\u0432\u0438\u0441\u043e\u0432 \u0438\u043b\u0438 \u0434\u0430\u0436\u0435 \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0430 \u0443\u0441\u0442\u0430\u0440\u0435\u0432\u0448\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u041f\u041e \u0441 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u043c\u0438 \u0440\u0430\u043d\u0435\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438. \u041e\u0434\u043d\u0438\u043c \u044d\u0442\u0438 \u0443\u043f\u0443\u0449\u0435\u043d\u0438\u044f \u0443\u0436\u0435 \u0432\u0435\u0440\u043d\u0443\u043b\u0438\u0441\u044c \u0431\u0443\u043c\u0435\u0440\u0430\u043d\u0433\u043e\u043c, \u0434\u0440\u0443\u0433\u0438\u043c \u043f\u043e\u0432\u0435\u0437\u043b\u043e \u0431\u043e\u043b\u044c\u0448\u0435,","og:url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/remote-desktop-glazami-atakuyushhego","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2020-06-09T23:43:04+00:00","article:modified_time":"2020-06-09T23:43:04+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"84702","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":null,"breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-02-28 14:52:37","updated":"2022-10-02 20:30:45"},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/84702","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=84702"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/84702\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/84703"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=84702"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=84702"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=84702"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}